Measurement-Device-Independent Entanglement Witnesses 
for All Entangled Quantum States 
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The problem of demonstrating entanglement is central to quantum information processing ap- 
plications. Resorting to standard entanglement witnesses requires one to perfectly trust the im- 
plementation of the measurements to be performed on the entangled state, which may be an un- 
justified assumption. Inspired by the recent work of F. Buscemi [Phys. Rev. Lett. 108, 200401 
(2012)], we introduce the concept of Measurement-Device-Independent Entanglement Witnesses 
(MDI-EWs), which allow one to demonstrate entanglement of all entangled quantum states with 
untrusted measurement apparatuses. We show how to systematically obtain such MDI-EWs from 
standard entanglement witnesses. Our construction leads to MDI-EWs that are loss-tolerant, and 
can be implemented with current technology. 



Quantum entanglement [l| — an essential feature of 
quantum theory, describing nonclassical correlations be- 
tween quantum systems — is the key resource that gives 
quantum information processing applications their ad- 
vantage over classical computing Q . Its characterization 
and verification, both from a theoretical and a practical 
point of view, arc therefore crucial problems in quantum 
information science. 

Several criteria have been proposed to distinguish en- 
tangled quantum states from separable ones. A sim- 
ple one is based on the concept of Entanglement Wit- 
nesses d, 0]: for any entangled state p, there exists 
a Hermitian operator W such that tr[VFp] < 0, while 
tr[M^(7] > for all separable states a. Such an operator 
W — called an Entanglement Witness (EW) — can thus 
be used to detect the entanglement of p. Experimentally 
testing an EW requires one to be able to estimate tr[H^p] ; 
this is typically done by decomposing W as a, linear com- 
bination of product Hermitian operators, estimated in- 
dependently from different local measurements on each 
subsystem of p. A drawback of this entanglement verifi- 
cation technique using standard EWs is however that it 
requires a perfect implementation of the measurements, 
so as to faithfully reconstruct trflL^p]. Imperfect mea- 
surements can indeed lead to an erroneous estimation of 
tr[W/9], and possibly to the wrong conclusion about the 
presence of entanglement, even if p is separable 

A way to get around this difficulty is to rely on the 
(loophole-free) violation of a Bell inequality Indeed, 



within quantum theory this can only be obtained when 
one performs measurements on an entangled state [l^ . 
A violation therefore guarantees the presence of entangle- 
ment, independently of the measurements actually per- 
formed, of the functioning of any device used in the ex- 
periment, as well as of the dimension of the underlying 
shared quantum state. The price to pay when consid- 
ering such Device-Independent Entanglement Witnesses 



(DI-EWs) Q is that not all entangled states can be de- 
tected: there are indeed (mixed) entangled states that 
can only generate locally-causal correlations, which sat- 
isfy all Bell inequalities [ij, |l3[ when measured one copy 
at a time. While this problem can be circumvented to 
some extent when partial knowledge of the system or de- 
vices is available (see, e.g., [31 and references therein), 
the possibility to witness all entangled states via these 
approaches remains unclear. 

Generalizing the concept of nonlocal games, Buscemi 
recently introduced Bell-like scenarios where instead of 
classical inputs specifying which measurements to be per- 
formed, the participating parties receive quantum in- 
puts [15[. Interestingly, he showed that all entangled 
states can give an advantage over separable states in such 
scenarios. While this suggests a way to certify the entan- 
glement of all non-separable states, the proof presented 
in [15| docs not, however, provide any explicit method to 



do this. 

In this Letter we show that any standard entanglement 
witness can be used to derive an explicit criterion for 
witnessing entanglement in the aforementioned scenario 
with quantum inputs. Such criteria do not depend on 
the particular functioning of the measuring devices, and 
thus provide Measurement-Device-Independent Entangle- 
ment Witnesses (MDI-EWs) , offering an interesting level 
of robustness against imperfect implementations. To il- 
lustrate the power of these criteria, we provide explicit 
MDI-EWs that can be used to witness the entanglement 
of any 2-qubit entangled Werner state, as well as noisy 3- 
qubit Greenberger-Horne-Zeilinger (GHZ) states that ex- 
hibit genuine tripartite entanglement. These MDI-EWs 
are loss-tolerant, and can be implemented with linear op- 
tics using current technology. 

Measurement-Device-Independent EWs. — For sim- 
plicity we consider first a bipartite scenario, the extension 
to multipartite cases being discussed below. 
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In the so-called "semiquantum nonlocal games" [l5|, 
the two separated parties, Alice and Bob, receive some 
quantum states (for Alice) and Tt (for Bob), and must 
output some values a and &, respectively. The correlation 
between these values is characterized by the conditional 
probability distribution P(a, 6|ts, Tt). 

While not being allowed to communicate during the 
game (although they can communicate before to agree on 
a pre-established strategy), Alice and Bob are nonethe- 
less allowed in this scenario to share some quantum state 
PAB- If their state is entangled, then Alice and Bob can 
obtain — by making appropriate joint measurements on 
their respective part of pab and on their input states — 
a correlation Pp which cannot be explained without en- 
tanglement [lH. Indeed, convexity arguments allow one 
to prove that there must exist a linear combination of 
probabilities 



I{P) = J2 ht,a,b Pia,b\Ts,Tt) 



(1) 



s,t,a,b 



such that I{Pp) < 0, while I{P) > necessary holds 
if Alice and Bob only have access to separable quantum 
states, and possibly infinite shared randomness. The real 
coefficients I3s,t,a,b in Eq. ([I]) correspond, up to a sign, 
to Busccmi's "payoff function" [l5|, multiplied by the 



probability distributions for s and t. 

The fact that I{P) > must hold when Alice and Bob 
do not share entanglement does not depend on the mea- 
surements they perform. Hence, if Alice and Bob obtain 
a value I{P) < 0, this guarantees in a Measurement- 
Device- Independent (MDI) manner that they shared en- 
tanglement; in this sense, I{P) from Eq. ^ defines a 
MDI-EW. In particular, no assumption is made on the 
dimension of the shared state. The requirement that with 
standard EWs the measurement implementations must 
be trusted is replaced here by the requirement that the 
input states must precisely be those specified in the as- 
sumptions. This is a natural assumption if one considers 
the framework of nonlocal games where an external ref- 
eree wants to be convinced that two untrusted parties 
share entanglement; clearly, the referee trusts the input 
states that he/she chooses. Another conceivable situa- 
tion would be a case where Alice and Bob want to ver- 
ify their entanglement themselves, and therefore choose 
and generate their input states themselves; in that case 
their generating devices must be trusted. Arguably, it 
may however be more reasonable to trust a source device 
than a detection device (which is, by definition, open to 
its external, untrusted environment and may receive any 
kind of physical systems from it). This can indeed be the 
case in particular in the context of Quantum Key Dis- 
tribution (QKD), where MDI-QKD — with the similar 
assumptions that the state preparations are trusted, but 
not the measuring devices — has been proposed 16- 18l| 
and recently implemented [l^. Note that in all cases, it 
is a crucial assumption when using MDI-EWs that the 



measuring devices must not have access a priori to the 
classical labels s, t of the input states; there must in 
particular be no unwanted side-channels carrying this in- 
formation to Alice and Bob's devices. 

Let us emphasize also that as in standard Bell 
tests 111, the assumption that Alice and Bob cannot 
communicate to establish their correlations is in general 
crucial when testing MDI-EWs (see however Ref. [201 for 
a similar scenario where communication is allowed, and 
where it is found that some MDI-EWs can still be used to 
certify entanglement in that case). This can in principle 
be ensured by having Alice and Bob's laboratories space- 
like separated when they receive their input states and 
return their outputs. Note that depending on the prac- 
tical situation under study, it may also be reasonable to 
simply accept the fact that Alice and Bob's devices do 
not communicate, e.g. when their internal functioning 
is trusted, but only their calibration and alignement is 
not; by making this stronger assumption than that of 
MDI, one does not require the space-like separation of 
the devices anymore. 

MDI-EWs from standard EWs. — We now explain 
how MDI-EWs can be derived from any standard EW. 

Consider a bipartite entangled state pab acting on 
some Hilbert space "Ha ® T-Lb, with dim T-La = dA and 
dimHs = rfs- Let W be an EW detecting the entan- 
glement of Pab, i-e., a Hermitian operator on T-La ® T~iB 
such that tr[M^/9AB] < 0, while tr[iy 0-^13] > for all sep- 
arable states UAB G 'Ha®'Hb- Because the set of density 
matrices spans the whole space of Hermitian operators, 
W can be written in the (non-unique) form 



W 



t Ts 



(2) 



with some real coefficients f3s,t, and where the operators 
tJ £ T-La and £ Hb are density matrices. Defining 
Ts and Tt to be there transposes, with respect to some 
orthonormal bases {\i)} of Ha and {\j)} of Hb, these 
are also density matrices. 

We use the decomposition ([2|) to obtain a MDI-EW in 
the following way: Alice and Bob's inputs arc the quan- 
tum states Ts and Tt, respectively. They arc asked to 
output a binary result: "conclusive" (denoted by /) or 
"inconclusive" . The expression 



/(P)= ^ /3,,t Pi/y\Ts,Tt) 



(3) 



is then of the form ^ [with (3s,tyy = /5s, t and Ps,t,a,b = 
for (a, h) ^ (/, /)], and takes non-negative values I{P) > 
when Alice and Bob do not share entanglement, while 
sharing the entangled state pab (and projecting their 
part of it together with their input state onto a maximally 
entangled state — see the proof below) allows them to get 
a correlation Pp such that I{Pp) < 0. These properties 
precisely define a MDI-EW. 
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Proof, (i) Suppose Alice and Bob do not share entangle- 
ment; all they can do is then to share a separable state of 
the form aAB — X^fcPfe '^A ® '^B' a-ny dimension, with 
Pk > and J^kPi' ^ 1 (note that any shared random- 
ness can be included in cr^s), and measure their respec- 
tive part of aAB together with their input states. Writ- 
ing and their Positive Operator- Valued Measure 
(POVM) elements [2l| corresponding to the outcomes /, 
the probability that they both get a conclusive outcome 
is 

= ^ Pfe trP^®B>).(T,®rt)] (4) 
fc 

withA^ =tTA[A^-im(J^)] and = trB[J5/ -(cr^® 1)] 
being effective POVM elements acting on the state space 
of Ts and Tt, and where tiA and tiB denote the partial 
traces over the systems of a\ and (Jg. From Eqs. ^ 
and ^ and by linearity, one finds 

/(P.) ^ P-^^ E ® S/) • (r. ® Tt)] 

s,t k 

= Pfetr[(A^®S^).W^T]. (5) 



Since W is an an entanglement witness and since all op- 
erators A^ and are positive Hermitian operators, 
one has tr[(A'y ® B'}) ■ W'^] = tT[W ■ (A''/ (g) B^)] > 
for all k. This proves that I (Pa) > for any separable 
state aAB- 



(ii) Suppose now that Alice and Bob share the state 
PAB- We define Alice and Bob's measurements to be 
the joint projections of their input state and their part 
of PAB onto the maximally entangled states 



^ Ef=i \^) ® N> and 1$+^) = ^ E% \j) ® |j>; the 
outcome / indicates a successful projection. We thus 
obtain 



Pp(/,/|r„rt) 



tr[(|1>l^>(*lAl® \'^^b){'^bb\) ■ i^s ® PAB ® n)] 
trlirj ®Tj)-pAB]/idAdB) (6) 



and 



^(Pp) = E Ps,ttY[{Tj ®Tj)-pAB]/{dAdB) 
s.t 

= tY[WpAB]/{dAdB) < 0, (7) 
which concludes the proof. 



□ 



Note that our construction above gives a more di- 
rect proof — based simply on the already established 
existence of a standard EW for any entangled state Q 



— that all entangled states, including multipartite non- 
fully- separable states [l|,[2^, can be "witnessed" in a Bell- 



like scenario with quantum inputs [15|. An interesting 
feature of our construction is that it does not require Al- 
ice and Bob to perform a ful l (g eneralized) Bell measure- 
ment, as considered in Ref. jl5| . but simply a projection 
onto a single maximally entangled state. Since only the 
probabilities P(/, ■/\ts, Tt) of conclusive events appear in 
/(P), cf Eq. this makes our MDI-EWs loss-tolerant: 
losses will indeed only decrease these probabilities, with- 
out changing the sign of /(P). 

MDI-EWs from standard EWs for genuine multipartite 
entanglement. — The construction given above can also 
be applied to entanglement witnesses that detect genuine 
multipartite entanglement |22| . For simplicity, we shall 
concentrate here on the tripartite scenario, the general- 
ization to an arbitrary number of parties being straight- 
forward. Let us start by recalling that a tripartite state 
CTbs shared between Alice, Bob and Charlie is said to be 
biseparable if it can be written in the form (2^ [23j : 



<Ths = Y'^'AB®<^C + Y'^Ac'»<^B+Y'^ 



BC'S^'^A, (8) 



where we have included the weight of each individual 
state of the mixture in its normalization; a state that 
cannot be written as above is said to be genuinely tripar- 
tite entangled. 

Consider such a genuinely tripartite entangled state 
PABC acting on Ha ® Hb ® 'Hc^ and a witness W 
detecting its genuine tripartite entanglement — i.e., a 
Hermitian operator such that tr[VF pabc] < 0, while 
tr[VFcrbs] > for all biseparable states dbs acting on 
Ua^Ub ^Uc [11. Similarly to Eq. let us de- 
compose W as: 



W 



E 



(9) 



where tJ ^ tJ , and t^ are density matrices acting on "Ha, 
Hb, and T-Lc while /3s,t.« are real expansion coefficients. 

In a similar way as in the bipartite case, one can show 
that using the input states for Alice, Tt for Bob and 
T„ for Charlie, and letting them perform binary-outcome 
measurements, the inequality 

/(P) = Y ^(^' ^' ^Vs,Tt,Tu) > (10) 

holds true for all probability distributions 
P(/, /, /|rs, Tt, r„) obtainable from biseparable states 
(Tbs, but can be violated by some probability distribu- 
tions derived from pabc- The proof follows closely that 
for the bipartite case given previously. We only sketch 
below the less trivial part for the benefit of the readers. 

Let us concentrate for now on the first sum in Eq. ([5|). 
In analogy to Eq. we get (with some abuse of nota- 
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tions in the ordering of the tensor products) 

= ^ tr[(A^ ® ® C^ ) ■ {ts ® Tt ® Tu ® CT^B ® cTc)] 

k 

= ^ tr[(AS^®C^).(T,®Tt®r„)] (11) 



where , B^, are respectively the local POVM el- 
ements of Alice, Bob and Charlie corresponding to their 
outcomes /, while AB'^ = tr^B[^^ (g) B/ • (1 (g) cr^s)], 
= trc[C^ • (1(8)(T^)], and the partial traces tr^s, trc 
are performed respectively over the state space of 
and cr^. One can interpret the operators AB'^ and 
as effective POVM elements acting on the state space of 
Ts(E)Tt and r^; note that these (as well as their transposes) 
are non-negative Hermitian operators. As a result, as 
with the calculation detailed in Eq. ([5]), the contribution 
of P*^i<^ towards I{P) in Eq. (fTU)) is non-negative; like- 
wise for the other terms from Eq. ([8]) . All in all, we thus 
see that inequality (fTO)) holds true for all correlations ob- 
tainable from any tripartite biseparable state ahs- Lastly, 
to see that inequality (fTO|) can be violated by pabc, one 
can proceed with a similar calculation as that detailed in 
Eqs. © and ([7]), letting Alice, Bob and Charlie perform 
projections onto maximally entangled states. 

Some explicit examples of MDI-EWs. — In order to 
illustrate our technique for constructing MDI-EWs, let 
us first consider the 2-qubit Werner state [l^l 

Pab = v\^'-){m-\ + (l-v)l/A (12) 

with V e [0, 1] and where |*-) = '"^^^^"^ is the singlet 
state. is entangled if and only if > 1/3 [H, [1^ , 



which can be detected with the EW 22, 2 



(13) 



such that tr[VKp^3] 



l-3u 



< for w > 1/3, while 



tr[VFCT^B] > for all separable 2-qubit states uab- 
W can for instance be decomposed as in Eq. ^ with: 

Ps,t^ \ ifs = <, Ps,t = -\ ifs^i, (14) 



for s, t = 0, . . . , 3, and 



1+n- a 



(15) 



where n = (1,1,1)/V3, <? — (ci, o'2, fs) is the vector of 
Pauli matrices, and where we write tio = 1 for conve- 
nience. The MDI-EW we obtain using our construction 
can thus explicitly be written as 

^E^(^'^i^-^*)-^E^('^"^i^-^*)' (16) 



with Alice and Bob's 4 pure states Ts,Tt corresponding 
to the four vertices of a regular tetrahedron on the Bloch 
sphere. By construction, I{P) > must hold if Alice 
and Bob do not share entanglement, while they can ob- 
tain I{Pp^) ~ < if they share the Werner state 
of Eq. with f > ^ and perform joint projective 
measurements on their part of p\g and their input states, 
onto the maximally entangled states \^^) — ^^^^^'^^ (or 
I'f^), equivalently). 

Note that another possible decomposition for W is the 
following: defining s — (si,S2) and t ~ (^1,^2); with 
si,ti = 0, 1 and S2, i2 = 1, • ■ • , 3, Eq. JS]) holds with 



/3s, t — Ss2,t; 



^^suti - 1 

6 



(17) 



where Sij is the Kronecker delta, and with 



= 7i , Tt = . (18) 



This defines another MDI-EW, with now the input states 
I ± x) , I ± y) , I ± z) , the respective eigenstates of the three 
Pauli matrices. 

As another example, let us consider the family of noisy 
3-partite GHZ states 

p:^HZ = HGHZ)(GHZ| + (1-t01/8, (19) 

where |GHZ) — l^M^iHi. This state is genuinely tri- 
partite entangled if and only if w > 3/7 which can 
be demonstrated using the following witness for genuine 
tripartite entanglement [12, : 



Wghz - il- |GHZ)(GHZ|. 



(20) 



A possible way to decompose VFqhz in the form of Eq. © 
is to make use of the states defined in Eq. (fTS)) (with t„ 
defined analogously), together with the coefficients 

Ps,t,u = A(-l)L^JL^J + L^JL-TiJ + L^JL-^J+i 



+ (- 1 )''+*+" V3]. 



These define a MDI-EW as in (|10p . allowing one to certify 
the genuine tripartite entanglement of Pqhz " > 

3/7 (by again letting Alice, Bob and Charlie perform 
projections onto |3>+)). 

Conclusion. — Inspired by Buscemi's "semiquantum 
nonlocal games" , we have introduced the concept 
of Measurement-Device- Independent Entanglement Wit- 
nesses. These can certify the entanglement of all entan- 
gled states, however weakly entangled they are — which 
cannot be done in a fully device-independent manner 
(at least, when measured one copy at a time 12, [l3| : 
see however [1^). We have shown that explicit, loss- 
tolerant MDI-EWs can be systematically obtained from 
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any standard entanglement witness - including those for 
witnessing genuine multipartite entanglement — in a sce- 
nario where each party receives quantum input states and 
projects them, together with their part of an entangled 
state, onto a maximally entangled state. 

For multi-qubit entangled states, as considered in the 
explicit examples above, the MDI-EWs obtained with 
our construction thus only involve projections onto 2- 
qubit Bell states, which can be implemented with linear 
optics b y s imply letting photons interfere on a beam- 
splitter [29[. Together with their loss-tolerance, this 
makes our MDI-EWs quite suitable for experimental 
tests, which are readily feasible with current technology. 
An experimental challenge will nevertheless be to faith- 
fully prepare the input states with a very good precision 
and no side-channel (which may otherwise transmit their 
classical labels), and possibly to adapt our MDI-EWs to 
account for some small, experimentally inescapable im- 
precision in the input state preparation. 

With our approach, the problem of finding MDI-EWs 
reduces to the problem of finding standard EWs, for 
which a number of techniques are known (see, e.g., (soj 
and references therein). Note that our construction only 
generates MDI-EWs of the special form of Eq. ^ (and 
that reciprocally, any MDI-EW of the form ^ which can 
be tested by Alice and Bob performing projections onto 
maximally entangled states gives rise through Eq. ^ to 
a standard EW). More general forms of MDI-EWs exist, 
as in (U]), which may be useful, for instance, if the pro- 
jection onto a maximally entangled state happened to be 
infeasible. Other techniques will however be required to 
generate more general MDI-EWs. It may be interest- 
ing to investigate whether more general MDI-EWs can 
have other practical advantages, e.g. with respect to the 
robustness to imperfect state preparation, or for possi- 
ble applications like MDI-QKD based on MDI-EWs; the 
ideas developed here indeed suggest the possibility for 
new protocols for MDI-QKD, different from those of 
[Toj . Likewise, another interesting question is whether us- 
ing more quantum inputs (as in (|18|) compared to ()15|) ) 
offers some more robustness, or some advantage for MDI- 
QKD. These are left as open problems. 
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Note added. — While finalizing our manuscript, we 
became aware of the recent work of Cavalcanti et al. [3ll| , 
which interprets (and extends) Buscemi's results [l5| in 
terms of trust in the entanglement verification procedure. 
Our results answer in particular some of the questions 
mentioned in the conclusion of that paper. 
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